vincent/homelab
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

fixe wireguard issue and custome allowed ips

Browse Source
This commit is contained in:
vincent 2022-09-13 18:11:39 +02:00
parent 688c4166cc
commit 4dc30ddf20
2 changed files with 8 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
ansible/host_vars/gerard
View File

@ -2,17 +2,18 @@
ansible_host: "192.168.1.41"
ansible_python_interpreter: "/usr/bin/python3"
wireguard_address: "10.0.0.6/24"
wireguard_allowed_ips: "10.0.0.6/32,192.168.1.0/24"
wireguard_byhost_allowed_ips:
merlin: 10.0.0.6,192.168.1.41
perrsistent_keepalive: "30"
wireguard_endpoint: ""
wireguard_postup:
- iptables -A FORWARD -i wg0 -j ACCEPT
- iptables -A FORWARD -o wg0 -j ACCEPT
- iptables -t nat -A POSTROUTING -o eno1 -j MASQUERADE
- iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
wireguard_postdown:
- iptables -D FORWARD -i wg0 -j ACCEPT
- iptables -D FORWARD -o wg0 -j ACCEPT
- iptables -t nat -D POSTROUTING -o eno1 -j MASQUERADE
- iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE

7
ansible/host_vars/oscar
View File

@ -1,18 +1,19 @@
---
wireguard_address: "10.0.0.2/24"
wireguard_allowed_ips: "10.0.0.2/32,192.168.1.0/24"
wireguard_byhost_allowed_ips:
merlin: 10.0.0.2,192.168.1.40,192.168.1.0/24
perrsistent_keepalive: "30"
wireguard_endpoint: ""
wireguard_postup:
- iptables -A FORWARD -i wg0 -j ACCEPT
- iptables -A FORWARD -o wg0 -j ACCEPT
- iptables -t nat -A POSTROUTING -o eno1 -j MASQUERADE
- iptables -t nat -A POSTROUTING -o enp2s0 -j MASQUERADE
wireguard_postdown:
- iptables -D FORWARD -i wg0 -j ACCEPT
- iptables -D FORWARD -o wg0 -j ACCEPT
- iptables -t nat -D POSTROUTING -o eno1 -j MASQUERADE
- iptables -t nat -D POSTROUTING -o enp2s0 -j MASQUERADE
consul_snapshot: True
partition_table: